Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/790099-2f90-43bc-bf0d-6d5496cb1a42/1/TYwMqcIfoZ3AWTK-_ZBgsWDtxcE.mft
File:                     TYwMqcIfoZ3AWTK-_ZBgsWDtxcE.mft (raw, json)
Hash identifier:          LV3NmkLsXTjpXc8k41fdAyap2uDKCQJ8xKAKeEfBnx0=
Subject key identifier:   03:31:64:2C:90:C7:8D:87:36:C7:7C:BB:27:8A:E5:A9:8D:74:52:63
Authority key identifier: 4D:8C:0C:A9:C2:1F:A1:9D:C0:59:32:BE:FD:90:60:B1:60:ED:C5:C1
Certificate issuer:       /CN=4d8c0ca9c21fa19dc05932befd9060b160edc5c1
Certificate serial:       0198481C06DDB8CA5318EFB5AC857CAD6AB9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TYwMqcIfoZ3AWTK-_ZBgsWDtxcE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/dd/790099-2f90-43bc-bf0d-6d5496cb1a42/1/TYwMqcIfoZ3AWTK-_ZBgsWDtxcE.mft
Manifest number:          15FD
Signing time:             Sat 26 Jul 2025 19:00:52 +0000
Manifest this update:     Sat 26 Jul 2025 19:00:52 +0000
Manifest next update:     Sun 27 Jul 2025 19:00:52 +0000
Files and hashes:         1: TYwMqcIfoZ3AWTK-_ZBgsWDtxcE.crl (hash: dUn+8Tro9uIhyvcBBnDzYifjGJs5zb6qQEzbB0X9UFs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/dd/790099-2f90-43bc-bf0d-6d5496cb1a42/1/TYwMqcIfoZ3AWTK-_ZBgsWDtxcE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/dd/790099-2f90-43bc-bf0d-6d5496cb1a42/1/TYwMqcIfoZ3AWTK-_ZBgsWDtxcE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TYwMqcIfoZ3AWTK-_ZBgsWDtxcE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Jul 2025 15:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:48:1c:06:dd:b8:ca:53:18:ef:b5:ac:85:7c:ad:6a:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4d8c0ca9c21fa19dc05932befd9060b160edc5c1
        Validity
            Not Before: Jul 26 19:00:52 2025 GMT
            Not After : Jul 27 19:00:52 2025 GMT
        Subject: CN=0331642c90c78d8736c77cbb278ae5a98d745263
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:a0:ee:02:d5:cd:e1:4b:fb:64:f3:cc:6f:d4:
                    b5:24:16:ed:b8:eb:be:ec:06:5f:ef:75:ac:e3:cb:
                    4d:6f:f5:19:d7:d6:ef:6f:0a:5a:1b:4d:ef:85:72:
                    a6:ce:fa:79:78:ba:11:cd:4b:75:4a:78:50:99:b5:
                    8e:5c:dd:0f:7c:eb:47:25:7c:de:d5:b6:9f:47:61:
                    f4:e9:9a:57:93:37:74:94:ef:af:43:27:43:92:f3:
                    90:2f:c7:57:e0:76:45:5f:a4:cb:0f:0f:f1:5d:7f:
                    44:bc:b3:46:da:b6:cb:fa:ba:c2:70:45:79:20:a4:
                    ed:9f:e3:4a:91:53:56:48:35:3b:3d:8a:12:1b:d6:
                    16:0e:9a:7b:da:a6:bb:8f:a1:77:2d:9e:6c:2b:f8:
                    54:df:37:a3:f7:a1:b3:ac:d0:ad:a0:65:99:30:5d:
                    c9:22:65:8e:b4:3d:dc:a4:7f:d3:66:e5:09:e2:d6:
                    83:13:1b:00:ce:16:a2:34:16:78:ff:fa:c5:0b:e6:
                    d8:4e:10:f1:73:a7:1f:42:d3:e0:ce:ae:a7:11:f9:
                    48:23:35:2e:f7:af:57:33:d3:2e:48:62:9e:f5:b4:
                    b0:ae:d4:bf:05:6d:fd:4b:9e:99:7d:29:50:80:c1:
                    29:5e:2c:5e:06:65:3a:db:88:9c:42:de:b0:d3:40:
                    63:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:31:64:2C:90:C7:8D:87:36:C7:7C:BB:27:8A:E5:A9:8D:74:52:63
            X509v3 Authority Key Identifier:
                keyid:4D:8C:0C:A9:C2:1F:A1:9D:C0:59:32:BE:FD:90:60:B1:60:ED:C5:C1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TYwMqcIfoZ3AWTK-_ZBgsWDtxcE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/790099-2f90-43bc-bf0d-6d5496cb1a42/1/TYwMqcIfoZ3AWTK-_ZBgsWDtxcE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/790099-2f90-43bc-bf0d-6d5496cb1a42/1/TYwMqcIfoZ3AWTK-_ZBgsWDtxcE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         cf:4c:bc:0e:b5:68:89:71:f2:3b:2d:a2:e1:7b:bc:64:b3:76:
         e4:30:df:ab:03:82:a5:3c:26:5f:a8:1a:9b:96:94:8d:19:a2:
         ca:b5:52:05:20:87:92:3c:9b:83:24:cb:5b:fd:31:78:22:80:
         fe:19:4e:b0:bf:f2:cd:4b:df:49:5c:2b:b7:07:9f:af:e5:df:
         e2:16:3c:ae:b3:c8:0a:85:68:f4:ee:90:45:96:54:bd:3e:da:
         24:db:c2:54:c7:e8:73:f2:a8:7f:e8:0c:48:29:12:f1:cb:94:
         07:3e:36:49:54:99:74:02:0d:f4:61:49:00:51:29:2c:5a:e4:
         4b:8f:a8:f3:76:ce:4c:86:cf:d4:19:cf:6a:05:2c:b9:a4:97:
         6c:31:5d:ac:f7:07:67:4d:06:34:a9:7c:d0:90:4f:96:94:eb:
         13:0c:96:f9:6c:0a:e7:a9:93:39:98:dc:c3:95:30:10:43:7d:
         34:b5:72:19:25:f4:5c:e5:e0:85:cd:9d:34:52:9f:4d:4d:9b:
         e1:35:d7:59:e6:2e:df:3b:e3:b5:e6:c1:13:07:b0:ae:1c:85:
         07:98:f7:d6:78:09:c2:85:aa:8f:10:29:45:05:73:5d:9c:75:
         4f:1c:60:db:15:c3:b1:cb:63:77:73:9b:71:3f:09:f3:85:84:
         34:63:55:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 01:23:34 2025 by rpki-client